$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json) Hash identifier: 8sYr/xQkysxqEqQfmaYdDnZyvO0D5hKMn6IkxVeCyAI= Subject key identifier: 6E:9A:49:B1:20:25:BD:DE:42:65:5E:ED:3C:5A:36:75:B5:3A:0D:D1 Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft Manifest number: 0135 Signing time: Thu 07 Aug 2025 04:59:23 +0000 Manifest this update: Thu 07 Aug 2025 04:59:22 +0000 Manifest next update: Thu 14 Aug 2025 04:59:22 +0000 Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: mmBaRluouIKEPPqye088NZxyybehi8ux5Pka530fFd4=) 2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: vxxrjf6mh6He/Qk48r/ND4XKn6+HAksWQduimGVP494=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060 Validity Not Before: Aug 7 04:59:22 2025 GMT Not After : Aug 14 04:59:22 2025 GMT Subject: CN=689432aa-ac45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:7d:d3:e8:ed:81:47:ab:7c:a9:8e:18:13: 05:f7:6e:b2:da:bc:ac:93:60:7a:6f:a5:26:10:03: d9:4e:fc:7e:62:33:04:1f:5b:e3:02:c8:59:93:5e: db:8f:42:97:b0:e2:ba:9d:57:b8:cb:fd:8a:61:e7: 84:f6:de:dd:4a:15:60:67:6d:2e:94:73:fd:b6:6a: 34:a3:e5:05:5a:58:c9:77:42:b1:2c:10:7a:09:d2: 49:25:80:39:b6:95:24:47:fc:e0:2f:5e:d4:f1:5d: 2f:ef:c3:b8:a8:c3:ba:04:3a:b7:bf:db:6e:41:1b: a9:94:6d:bf:aa:5c:de:15:ed:c9:8d:ec:9d:0b:93: 5e:2c:58:71:8d:35:e0:5d:53:e8:0f:5a:f8:2e:79: a9:34:b9:9c:dd:38:1f:08:15:94:b1:c6:c5:19:8f: 46:dd:97:60:1b:c4:88:cc:4d:1d:37:3d:33:27:65: 5c:d0:1f:d4:ce:3f:9b:c8:ba:0d:62:25:da:64:33: af:5a:cf:a3:8d:b4:ab:3d:7d:f3:f8:e5:4e:06:28: 75:f2:8e:24:b5:07:19:b9:ab:97:79:0e:65:b8:e0: 7b:94:9d:e5:5c:59:e5:e3:23:9d:f0:42:a8:c7:83: 2c:ec:a4:6f:1f:5a:07:db:e5:f5:fe:64:fd:36:f9: d9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9A:49:B1:20:25:BD:DE:42:65:5E:ED:3C:5A:36:75:B5:3A:0D:D1 X509v3 Authority Key Identifier: keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:46:32:df:c4:69:e0:55:84:5d:29:b3:27:bf:9e:d6:07:61: 6f:2d:80:a4:56:ef:91:cb:f6:d8:e9:31:14:4a:30:a3:ab:f3: 2e:32:26:9f:2a:c8:5a:9f:67:a9:0e:53:c5:97:cb:0f:bf:2f: f2:8d:e0:47:fd:52:0a:6b:10:79:8a:b6:46:73:56:2b:6c:19: 58:32:3f:90:dd:e0:1e:00:73:23:f9:bc:66:bb:33:7b:5d:73: 5d:6c:0d:f4:dc:45:94:2b:d3:49:69:9a:c5:1f:9b:7c:92:50: 2b:16:a8:b7:8e:28:5e:ff:7b:23:43:40:f5:d3:34:d9:ef:69: 2b:86:f3:b3:d4:2d:6a:56:16:f7:0d:14:17:29:8b:78:98:69: 66:ae:a8:35:ec:84:42:f2:cc:1a:6c:b6:5a:48:6b:31:bd:21: 16:fc:0b:69:6d:94:15:39:49:b5:85:db:58:10:a3:95:b1:17: eb:78:a7:0a:ba:80:67:ef:ec:2e:b0:dd:45:da:d5:98:b8:26: 73:6c:7b:3f:6b:13:6b:fd:32:7d:59:57:ff:48:42:d5:2a:58: d8:e1:59:10:6d:43:55:85:b4:9d:21:08:22:13:5a:e2:14:a2: c1:26:01:44:a5:01:3f:bc:cf:6b:1e:ff:b2:56:1f:6d:f3:8d: 07:fb:7b:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDOUExMTAvBgNVBAUTKDg3MjhCODI4RjMxODYwM0U0NDcxMTA3MEMyNEVDQzA4 OEExOTAwNjAwHhcNMjUwODA3MDQ1OTIyWhcNMjUwODE0MDQ1OTIyWjAYMRYwFAYD VQQDEw02ODk0MzJhYS1hYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplV90+jtgUerfKmOGBMF926y2rysk2B6b6UmEAPZTvx+YjMEH1vjAshZk17b j0KXsOK6nVe4y/2KYeeE9t7dShVgZ20ulHP9tmo0o+UFWljJd0KxLBB6CdJJJYA5 tpUkR/zgL17U8V0v78O4qMO6BDq3v9tuQRuplG2/qlzeFe3JjeydC5NeLFhxjTXg XVPoD1r4LnmpNLmc3TgfCBWUscbFGY9G3ZdgG8SIzE0dNz0zJ2Vc0B/Uzj+byLoN YiXaZDOvWs+jjbSrPX3z+OVOBih18o4ktQcZuauXeQ5luOB7lJ3lXFnl4yOd8EKo x4Ms7KRvH1oH2+X1/mT9NvnZQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6aSbEg Jb3eQmVe7TxaNnW1Og3RMB8GA1UdIwQYMBaAFIcouCjzGGA+RHEQcMJOzAiKGQBg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUM5QS9FMTlBMjU3ODk3 RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlENUVjUkJ3d2s3TUNJb1pB R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5aTRLUE1ZWUQ1RWNSQnd3azdNQ0lvWkFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUM5QS9FMTlBMjU3ODk3RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlE NUVjUkJ3d2s3TUNJb1pBR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkRjLfxGngVYRdKbMnv57WB2FvLYCkVu+Ry/bY6TEUSjCjq/MuMiaf Kshan2epDlPFl8sPvy/yjeBH/VIKaxB5irZGc1YrbBlYMj+Q3eAeAHMj+bxmuzN7 XXNdbA303EWUK9NJaZrFH5t8klArFqi3jihe/3sjQ0D10zTZ72krhvOz1C1qVhb3 DRQXKYt4mGlmrqg17IRC8swabLZaSGsxvSEW/AtpbZQVOUm1hdtYEKOVsRfreKcK uoBn7+wusN1F2tWYuCZzbHs/axNr/TJ9WVf/SELVKljY4VkQbUNVhbSdIQgiE1ri FKLBJgFEpQE/vM9rHv+yVh9t840H+3vK -----END CERTIFICATE-----Generated at Fri Aug 8 19:31:39 2025 by rpki-client